Setting up a DMARC record

How to configure a DMARC record to meet your organization's needs?

Introduction

DMARC (Domain-Based Message Authentication, Reporting & Conformance) is a protocol designed to monitor and control email flows for a mail domain. It helps domain owners protect their domains against spoofing and phishing.

If you're unfamiliar with DMARC, SPF, and DKIM, we recommend reading more about these topics before configuring your first DMARC report:

  • What is DMARC? (link)
  • What is SPF? (link)
  • What is DKIM? (link)

Ready to set up your first DMARC record?

To benefit from the many advantages of DMARC, simply configure a DMARC record in your domain's DNS zone:

  • Hostname: _[URL non valide supprimée]
  • Type: TXT
  • Value: Multiple values possible

Configuration of this record typically takes about 5 minutes.

1. Generate a DMARC record

To generate a DMARC record for your domain, log in to your https://support.security-mail.net/ console and navigate to Reports => DMARC.

Example of a DMARC record

Here's an example of a DMARC record for the domain example.com using the "none" policy and sending reports to the email address dmarc@secuserve.com:

v=DMARC1; p=none; rua=mailto:dmarc@secuserve.com

If no record is published to our gateways, and thus to dmarc@secuserve.com, the following notification will be displayed:

2. Add a DMARC record to your DNS zone

Once you've generated your DMARC record, add it to your DNS zone.

You can do this by logging into your hosting provider's control panel and accessing your domain's DNS settings.

3. Verify your DMARC record

After adding your DMARC record to your DNS zone, verify that it's configured correctly.

You can do this using a DMARC verification tool, such as the one provided by DMARC Analyzer or DMARC Emulator.

Tags